The problem is that I need one to encrypt a password in the same manner as
the Sun OS.  This is because we use the database to populate /etc/passwd.
So if the OS can't compare passwords with what is stored in the database,
then nobody will be able to log into the Unix box.

Thanks for you help,

Rick Stephenson


 Date: Mon, 30 Jul 2001 14:57:34 -0400
 Subject: RE: Encrypting a password

DBMS_OBFUSCATION package is exactly what you want.

I have build something like this with DBMS_OBFUSCATION although I did not
compare against /etc/passwd.

I simply provided a "login" procedure, createKey, savePassword,
retrievePassword.

I used a createKey function to create keys that were basically RAW(128) if
I
remember correctly, then I had password stored encrypted in the database,
then another table with a FK to the user table which stored the key in
encrypted form.

You would need to join the key table with the encrypted password to decrypt
or cross exam.

"Walking on water and developing software from a specification are easy if
both are frozen."

Christopher R. Spence
Oracle DBA
Fuelspot



-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to